.NET MySQL的参数化查询

MySqlConnection conn = new MySqlConnection(SqlConnnectString);

MySqlCommand cmd = new MySqlCommand("SELECT * FROM `TB_CM_Log` WHERE ID = ?ID LIMIT 1", conn);

cmd.Parameters.AddWithValue("ID", id);

cmd.CommandType = CommandType.Text;

cmd.Parameters.Clear();

TB_CM_Log model = new TB_CM_Log();

if (conn.State != ConnectionState.Open)
     conn.Open();

using (MySqlDataReader rdr = cmd.ExecuteReader(CommandBehavior.CloseConnection)
{
      while (dr.Read())
      {
             model.ID = dr.GetString();
             model.ModType = dr.GetInt32();
             model.ModTypeName = dr.GetString();
             model.SourcesType = dr.GetString();
             model.Description = dr.GetString();
             model.OperatorID = dr.GetInt32();
             model.OperatorName = dr.GetString();
             model.SucFlag = dr.GetInt32();
             model.OperaTime = dr.GetDateTime();
             model.IP = dr.IsDBNull() ? "" : dr.GetString();
             model.ResultDes = dr.IsDBNull() ? "" : dr.GetString();
       }
}

conn.Close();